Privacy — what this site does, and mostly doesn't do, with your data.

The short version

This site doesn't run ads, doesn't set tracking cookies, doesn't have analytics, and isn't quietly building a profile of who you are. You arrive, look at some paintings, and leave — nothing more dramatic than that.

There are three places where data of any kind technically touches the system: the hosting provider, the font service, and your own email if you decide to write to me. The details are below, because GDPR likes details.

If you read no further: I'm not selling your data because I have nothing to sell. There's no funnel here, only canvases.

Who is responsible

Raphael Johannsen — working as Rapha Johannsen — registered as a freelance artist in Portugal. Full disclosure details live in the Impressum.

Contact for any privacy question: raphael.johannsen@gmail.com.

What data the site collects on its own

Nothing the website itself collects, stores, or hands to anyone. There are no forms, no signups, no cookies set by me, no analytics scripts, no remarketing pixels. The site is static HTML.

Hosting (Vercel)

The site is hosted on Vercel (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA), which automatically processes standard server logs when your browser asks for a page. That typically includes:

This is the technical minimum for a website to exist at all. The legal basis is Art. 6 (1) (f) GDPR — legitimate interest in delivering and securing the site. Vercel's own privacy notice is at vercel.com/legal/privacy-policy.

Fonts (Google Fonts)

The site loads some typefaces from Google Fonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When your browser fetches a font, Google receives the request — which technically includes your IP. The legal basis is Art. 6 (1) (f) GDPR — legitimate interest in making the page look the way it was designed to look.

Most of the body typefaces are also self-hosted from this site directly, so Google sees less than it would on a typical website. Their policy: policies.google.com/privacy.

Email (if you write to me)

If you click any of the mailto: links and send a message, your email and whatever you wrote arrives in my Gmail inbox. Email lives there for as long as it's useful — typically up to two years for general correspondence, longer for active commission or exhibition projects where records have to be kept for tax purposes.

Legal basis: Art. 6 (1) (b) GDPR (pre-contract or contract performance) for project-related mail, and Art. 6 (1) (f) GDPR (legitimate interest in answering the people who write to me) for everything else.

External links

Some pages link out — to Instagram, the Online Dispute Resolution platform, and similar. Once you click, you're on someone else's website under someone else's privacy notice. None of that is in my control.

Your rights under GDPR

You have the right to:

To exercise any of these, write to raphael.johannsen@gmail.com. I'll respond within a month, which is the legal maximum and roughly how long it would take any human being to find the relevant email anyway.

Changes to this notice

If the site ever starts doing something more interesting with data — adding a newsletter, a contact form, an analytics tool that someone convinces me actually matters — this page will be updated before that happens. The "last updated" date at the top is the one to watch.